Warning: Permanently added '[localhost]:34210' (ECDSA) to the list of known hosts. 2024/10/26 08:59:47 fuzzer started 2024/10/26 08:59:48 dialing manager at localhost:45639 syzkaller login: [ 69.004698] cgroup: Unknown subsys name 'net' [ 69.091116] cgroup: Unknown subsys name 'cpuset' [ 69.127419] cgroup: Unknown subsys name 'rlimit' 2024/10/26 09:00:05 syscalls: 201 2024/10/26 09:00:05 code coverage: enabled 2024/10/26 09:00:05 comparison tracing: enabled 2024/10/26 09:00:05 extra coverage: enabled 2024/10/26 09:00:05 setuid sandbox: enabled 2024/10/26 09:00:05 namespace sandbox: enabled 2024/10/26 09:00:05 Android sandbox: enabled 2024/10/26 09:00:05 fault injection: enabled 2024/10/26 09:00:05 leak checking: enabled 2024/10/26 09:00:05 net packet injection: enabled 2024/10/26 09:00:05 net device setup: enabled 2024/10/26 09:00:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 09:00:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 09:00:05 USB emulation: enabled 2024/10/26 09:00:05 hci packet injection: enabled 2024/10/26 09:00:05 wifi device emulation: enabled 2024/10/26 09:00:05 802.15.4 emulation: enabled 2024/10/26 09:00:05 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 09:00:06 starting 8 fuzzer processes 09:00:06 executing program 0: r0 = getegid() r1 = semget$private(0x0, 0x1, 0x107) r2 = getuid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x1, r2, r0, 0xee00, r0, 0x4, 0x4}, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000}) socketpair(0x22, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xf0300) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000200)={{0x30, 0x9}, 'port0\x00', 0x80, 0x30, 0x80000000, 0x1472, 0x2, 0x9, 0xffffffff, 0x0, 0x0, 0x81}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r3) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x90) r6 = semget$private(0x0, 0x3, 0x8a) semctl$SETVAL(r6, 0x2, 0x10, &(0x7f0000000440)=0x20) semget$private(0x0, 0x3, 0x5) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r8, 0xfffffffeffffffff, 0x0, 0x5, 0x1, 0x1}, 0x3) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb90ede14861130c0, 0x4000010, 0xffffffffffffffff, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x2000008, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) io_uring_setup(0x5b9f, &(0x7f0000000600)={0x0, 0x53b0, 0x0, 0x2, 0x239}) 09:00:06 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x5, 0x8b9f, 0xc, 0x9, 0x4, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x884) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000240)={0x1, 0x1, 'client0\x00', 0x0, "63784d088a24697b", "468179353003a2415e77d370e556b35c026dd43a7e05eefb65d5dd718e305f6a", 0x4, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000300)={{0xe8, 0xef}, 0x1, 0x9, 0x3f, {0x0, 0xf9}, 0x40, 0xae}) syz_io_uring_setup(0x28af, &(0x7f0000000380)={0x0, 0x3812, 0x20, 0x1, 0x155}, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, 0x1, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x12000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9eaa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x77f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x24000080) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000880)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/module/dm_mod', 0x6ac801, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f0000000a80)="5b2894253ae8d15f4c2c5ad82a2a907ab1c5cd312b09a7e1d0c3f3ee716f3092484a951f2d3fb3786f5b6454b84067c6a3d387c97b058db2c9312d84b4d147c956cf0e4433dfbbd974a367d43292437bbb27f83b1a062c76944e3ed2db44c598f3343c7cc8aede2eb57cdd1218c8a9c3a0d75ddeb7a111ca297964b6b6ad658f8b0f6a01736b842c20c248a50d04e0463bc2dac5b53618d262380170271171131d5b8ae3afed3d7f8e11", 0xaa, 0x1f, 0x0, 0x3, r3}, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000bc0)={0x0, 0x80, 0x3f, 0xfb, 0x4, 0x0, 0x0, 0x7, 0x10020, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x4, 0x6, 0x9, 0x7, 0x0, 0xfbff, 0x0, 0x2, 0x0, 0xa24}, 0x0, 0xe, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000c40)={0x0, 0x5, 0x1, 'queue1\x00', 0xffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xeb98b32d73961c79) 09:00:06 executing program 1: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x1) socketpair(0x8, 0x6, 0x20, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair(0x5, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/block/sda', 0x121000, 0x52) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x24004003) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x25f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x68}, 0x1, 0x0, 0x0, 0x480c4}, 0x2048010) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x80}}, 0x4084) syz_io_uring_setup(0x4dd8, &(0x7f00000008c0)={0x0, 0x5b4f, 0x10, 0x1, 0x7a, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000940), &(0x7f0000000980)) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0xd00, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x881) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r1) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x291cbb8ff44ba16b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40804) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) 09:00:06 executing program 5: getuid() r0 = syz_io_uring_setup(0x2f3b, &(0x7f0000000000)={0x0, 0x21e7, 0x8, 0x2, 0x104}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fstat(r0, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x242000, 0xe4, 0x11}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x734) fstat(r0, &(0x7f0000000240)) getuid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000300)={0x80000000, 0xffff, 0x4, 0x1c00000, 0xff, 0x4e31}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000400)={0x2, 0x8, 0x0, 'queue1\x00', 0x3ec}) getuid() clock_gettime(0x0, &(0x7f00000004c0)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000500)) io_cancel(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfffc, r3, &(0x7f0000000540)="3e3e79047283fea923fdea65f6b4e08093c29ddeead824dcc55a232e5a2f6b66521b2b2f07c0accf47d15fdca7a3522f33899baa4ba1158388f95f217cb2", 0x3e, 0xfffffffffffff801, 0x0, 0x2}, &(0x7f00000005c0)) syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000640)={{0x3, 0x76}, 0x1, 0xffff, 0x2, {0x0, 0x7}, 0x81, 0xcc8}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000006c0)) socketpair(0xb, 0x2, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r4, &(0x7f00000007c0)={0x1f, @none}, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000800)) 09:00:06 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/149, 0x95, 0x1, &(0x7f0000000100)=""/140, 0x8c}, &(0x7f0000000200)=0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x8, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x7fff, 0x1ff, 0x4cb, 0x5, 0x1}, 0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="13707255a381c53a9b901742e5c93635", 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000380)=0x3, 0x4) r1 = syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x402040}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000580)={{0x37, 0xea}, 'port0\x00', 0x0, 0x2004f, 0xfffffffe, 0xf43, 0xcf, 0x7, 0x3, 0x0, 0x4, 0x7}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000006c0), 0x4) 09:00:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r1 = request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='nbd\x00', 0xfffffffffffffff8) r2 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "daaf3b689b77d909d5db2012f3a6899586d5ff5735964cdbab7d3c96f3dc708144ed9425eb6f1dfd9f60f8405684244bdce1e77acd75cde4a73676d4e6708f2a", 0x30}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14040000}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}}, 0x4080) r8 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0xa, 0x35, 0x66, 0x32, 0x35, 0x37, 0x36, 0x64, 0x61, 0x31, 0x0, 0x35, 0x31, 0x34, 0x33, 0x65]}, &(0x7f0000000800)={0x0, "dd44c0ea5b8d509427b66b2e8d8dc8f6dcad312881005ade50de2a037ebc9365f7821b76b4041bf832dbf7d2681854fe654b776d0264fba0535295fce7a3d509", 0x2f}, 0x48, r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x40) [ 86.937602] audit: type=1400 audit(1729933206.987:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:00:07 executing program 6: fstat(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket(0x25, 0x3, 0x10001) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5ea}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048094) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sched_yield() sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xebe}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) epoll_create(0x401) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4) socketpair(0x1f, 0x3, 0x6, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r4) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x800) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000780)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4551db71}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x74e}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000a40)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) 09:00:07 executing program 7: fstat(0xffffffffffffffff, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000080)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/ahci', 0x242400, 0x50) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/176, &(0x7f0000000240)=0xb0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x107, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x59, 0x20}, 0x0, 0x7, 0x8001, {0x3f, 0x3f}, 0xff, 0x1}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x20, 0x8, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x7800, 0x1de, 0x40}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4000004) connect$bt_sco(r0, &(0x7f0000000900)={0x1f, @none}, 0x8) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}}, 0x40040) syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000ac0), 0x4) [ 88.462201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.468014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.472494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.474818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.483973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.486168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.489124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.491158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.494174] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.494192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.497264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.497997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.509140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.513592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.516853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.519069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.521239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.527976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.530546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.530749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.533461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.534566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.537454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.539485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.550610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.568611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.574169] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.576921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.579595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.580733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.584240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.591582] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.594212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.598688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.603321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.605045] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.607183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.609688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.613015] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.615030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.620219] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.622299] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.628680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.635641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.637728] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.643744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.651066] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.658621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.612464] Bluetooth: hci3: command tx timeout [ 90.612462] Bluetooth: hci0: command tx timeout [ 90.612707] Bluetooth: hci1: command tx timeout [ 90.613176] Bluetooth: hci2: command tx timeout [ 90.675561] Bluetooth: hci7: command tx timeout [ 90.676201] Bluetooth: hci5: command tx timeout [ 90.676892] Bluetooth: hci4: command tx timeout [ 90.739689] Bluetooth: hci6: command tx timeout [ 92.659800] Bluetooth: hci2: command tx timeout [ 92.660331] Bluetooth: hci1: command tx timeout [ 92.661704] Bluetooth: hci0: command tx timeout [ 92.663118] Bluetooth: hci3: command tx timeout [ 92.723689] Bluetooth: hci4: command tx timeout [ 92.725251] Bluetooth: hci5: command tx timeout [ 92.726545] Bluetooth: hci7: command tx timeout [ 92.788459] Bluetooth: hci6: command tx timeout [ 94.707784] Bluetooth: hci0: command tx timeout [ 94.709308] Bluetooth: hci3: command tx timeout [ 94.709469] Bluetooth: hci1: command tx timeout [ 94.709517] Bluetooth: hci2: command tx timeout [ 94.773411] Bluetooth: hci4: command tx timeout [ 94.774763] Bluetooth: hci7: command tx timeout [ 94.776230] Bluetooth: hci5: command tx timeout [ 94.835495] Bluetooth: hci6: command tx timeout [ 96.755543] Bluetooth: hci2: command tx timeout [ 96.756079] Bluetooth: hci0: command tx timeout [ 96.757134] Bluetooth: hci1: command tx timeout [ 96.757679] Bluetooth: hci3: command tx timeout [ 96.819488] Bluetooth: hci4: command tx timeout [ 96.819978] Bluetooth: hci7: command tx timeout [ 96.820503] Bluetooth: hci5: command tx timeout [ 96.883537] Bluetooth: hci6: command tx timeout [ 151.041864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.045360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.052537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.066519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.069637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.073134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.104561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.106942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.109882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.116300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.120818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.126219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.151780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.172779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.178855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.182602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.186679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.187747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.196806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.203623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.205765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.207399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.208597] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.211802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.230756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.232204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.233976] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.236791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.238689] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.242798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.268576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.271975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.273527] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.276418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.278142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.279285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.326967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.337151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.341622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.342984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.345619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.347187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.348559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.367877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.414941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.428299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.432582] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.450742] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.139739] Bluetooth: hci0: command tx timeout [ 153.203507] Bluetooth: hci1: command tx timeout [ 153.269448] Bluetooth: hci5: command tx timeout [ 153.271048] Bluetooth: hci2: command tx timeout [ 153.332587] Bluetooth: hci4: command tx timeout [ 153.398412] Bluetooth: hci7: command tx timeout [ 153.461942] Bluetooth: hci3: command tx timeout [ 153.587567] Bluetooth: hci6: command tx timeout [ 155.187427] Bluetooth: hci0: command tx timeout [ 155.251531] Bluetooth: hci1: command tx timeout [ 155.317496] Bluetooth: hci2: command tx timeout [ 155.318062] Bluetooth: hci5: command tx timeout [ 155.379503] Bluetooth: hci4: command tx timeout [ 155.444383] Bluetooth: hci7: command tx timeout [ 155.507543] Bluetooth: hci3: command tx timeout [ 155.635442] Bluetooth: hci6: command tx timeout [ 157.235505] Bluetooth: hci0: command tx timeout [ 157.299426] Bluetooth: hci1: command tx timeout [ 157.363460] Bluetooth: hci2: command tx timeout [ 157.363962] Bluetooth: hci5: command tx timeout [ 157.428371] Bluetooth: hci4: command tx timeout [ 157.491402] Bluetooth: hci7: command tx timeout [ 157.556390] Bluetooth: hci3: command tx timeout [ 157.683531] Bluetooth: hci6: command tx timeout [ 159.283442] Bluetooth: hci0: command tx timeout [ 159.347495] Bluetooth: hci1: command tx timeout [ 159.411437] Bluetooth: hci2: command tx timeout [ 159.411922] Bluetooth: hci5: command tx timeout [ 159.475547] Bluetooth: hci4: command tx timeout [ 159.539419] Bluetooth: hci7: command tx timeout [ 159.603473] Bluetooth: hci3: command tx timeout [ 159.731404] Bluetooth: hci6: command tx timeout [ 213.219179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.224613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.227269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.231285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.240148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.255599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.256496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.260601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.262273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.274457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.276140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.277592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.461027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.464700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.466466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.471799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.474932] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.476632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.508010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.513596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.516006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.521524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.523530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.527768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.531152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.533671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.534837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.567167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.568833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.571688] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.575282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.578621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.584566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.590564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.598554] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.600549] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.602904] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.608558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.610568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.611871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.621855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.626603] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.627902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.647586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.710749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.726144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.776172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.778114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.300468] Bluetooth: hci0: command tx timeout [ 215.350966] Bluetooth: hci1: command tx timeout [ 215.539445] Bluetooth: hci2: command tx timeout [ 215.604446] Bluetooth: hci4: command tx timeout [ 215.667415] Bluetooth: hci7: command tx timeout [ 215.731465] Bluetooth: hci3: command tx timeout [ 215.924428] Bluetooth: hci5: command tx timeout [ 215.988454] Bluetooth: hci6: command tx timeout [ 217.331564] Bluetooth: hci0: command tx timeout [ 217.395391] Bluetooth: hci1: command tx timeout [ 217.587470] Bluetooth: hci2: command tx timeout [ 217.651449] Bluetooth: hci4: command tx timeout [ 217.715508] Bluetooth: hci7: command tx timeout [ 217.779557] Bluetooth: hci3: command tx timeout [ 217.971805] Bluetooth: hci5: command tx timeout [ 218.035637] Bluetooth: hci6: command tx timeout [ 219.379435] Bluetooth: hci0: command tx timeout [ 219.444630] Bluetooth: hci1: command tx timeout [ 219.635557] Bluetooth: hci2: command tx timeout [ 219.699405] Bluetooth: hci4: command tx timeout [ 219.763400] Bluetooth: hci7: command tx timeout [ 219.827418] Bluetooth: hci3: command tx timeout [ 220.021624] Bluetooth: hci5: command tx timeout [ 220.084458] Bluetooth: hci6: command tx timeout [ 221.427512] Bluetooth: hci0: command tx timeout [ 221.491414] Bluetooth: hci1: command tx timeout [ 221.683437] Bluetooth: hci2: command tx timeout [ 221.747408] Bluetooth: hci4: command tx timeout [ 221.812377] Bluetooth: hci7: command tx timeout [ 221.875419] Bluetooth: hci3: command tx timeout [ 222.067443] Bluetooth: hci5: command tx timeout [ 222.131473] Bluetooth: hci6: command tx timeout [ 275.692047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.694234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.731216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.738544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.741038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.744049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.745769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.747761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.749924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.753938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.758042] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.761358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.874984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.887705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.907132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.916660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.938165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.939828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.940823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.941049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.944208] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.957933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.968964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.977949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.983106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.985986] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.994228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.995168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.995981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.999546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.025340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.037615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.039243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.052625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.063111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.067669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.101628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.102745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.128655] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.135473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.141720] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.152589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.165562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.167580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.178755] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.179927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.186607] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.195765] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.811423] Bluetooth: hci1: command tx timeout [ 277.812525] Bluetooth: hci0: command tx timeout [ 278.067636] Bluetooth: hci2: command tx timeout [ 278.132424] Bluetooth: hci5: command tx timeout [ 278.132457] Bluetooth: hci4: command tx timeout [ 278.132827] Bluetooth: hci3: command tx timeout [ 278.197419] Bluetooth: hci6: command tx timeout [ 278.260505] Bluetooth: hci7: command tx timeout [ 279.859459] Bluetooth: hci0: command tx timeout [ 279.860529] Bluetooth: hci1: command tx timeout [ 280.115488] Bluetooth: hci2: command tx timeout [ 280.179528] Bluetooth: hci5: command tx timeout [ 280.179653] Bluetooth: hci4: command tx timeout [ 280.180386] Bluetooth: hci3: command tx timeout [ 280.244436] Bluetooth: hci6: command tx timeout [ 280.307553] Bluetooth: hci7: command tx timeout [ 281.908510] Bluetooth: hci1: command tx timeout [ 281.909868] Bluetooth: hci0: command tx timeout [ 282.164414] Bluetooth: hci2: command tx timeout [ 282.227586] Bluetooth: hci4: command tx timeout [ 282.230540] Bluetooth: hci3: command tx timeout [ 282.231005] Bluetooth: hci5: command tx timeout [ 282.291420] Bluetooth: hci6: command tx timeout [ 282.356469] Bluetooth: hci7: command tx timeout [ 283.955511] Bluetooth: hci1: command tx timeout [ 283.958401] Bluetooth: hci0: command tx timeout [ 284.212425] Bluetooth: hci2: command tx timeout [ 284.276501] Bluetooth: hci5: command tx timeout [ 284.277830] Bluetooth: hci3: command tx timeout [ 284.278374] Bluetooth: hci4: command tx timeout [ 284.339427] Bluetooth: hci6: command tx timeout [ 284.403473] Bluetooth: hci7: command tx timeout [ 338.089016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.093762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.096273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.098472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.100199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.106171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.109129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.111461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.116467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.124519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.126818] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.128418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.177606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.190030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.191845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.197873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.199015] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.201253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.204463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.206164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.207504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.211396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.214731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.234354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.236940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.240710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.241868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.244092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.246101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.248504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.250673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.253078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.257081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.269583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.275202] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.277411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.309651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.316235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.323567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.326842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.331212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.342071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.347717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.353647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.356712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.362271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.371580] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.375171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.150412] Bluetooth: hci0: command tx timeout [ 340.211533] Bluetooth: hci1: command tx timeout [ 340.275436] Bluetooth: hci2: command tx timeout [ 340.339445] Bluetooth: hci5: command tx timeout [ 340.341108] Bluetooth: hci3: command tx timeout [ 340.341843] Bluetooth: hci4: command tx timeout [ 340.403482] Bluetooth: hci6: command tx timeout [ 340.467568] Bluetooth: hci7: command tx timeout [ 342.195394] Bluetooth: hci0: command tx timeout [ 342.259419] Bluetooth: hci1: command tx timeout [ 342.323465] Bluetooth: hci2: command tx timeout [ 342.387505] Bluetooth: hci3: command tx timeout [ 342.389399] Bluetooth: hci4: command tx timeout [ 342.390760] Bluetooth: hci5: command tx timeout [ 342.451468] Bluetooth: hci6: command tx timeout [ 342.515386] Bluetooth: hci7: command tx timeout [ 344.245505] Bluetooth: hci0: command tx timeout [ 344.307405] Bluetooth: hci1: command tx timeout [ 344.371386] Bluetooth: hci2: command tx timeout [ 344.435548] Bluetooth: hci5: command tx timeout [ 344.437144] Bluetooth: hci3: command tx timeout [ 344.438674] Bluetooth: hci4: command tx timeout [ 344.500391] Bluetooth: hci6: command tx timeout [ 344.563439] Bluetooth: hci7: command tx timeout [ 346.292489] Bluetooth: hci0: command tx timeout [ 346.355389] Bluetooth: hci1: command tx timeout [ 346.421446] Bluetooth: hci2: command tx timeout [ 346.483408] Bluetooth: hci3: command tx timeout [ 346.485175] Bluetooth: hci4: command tx timeout [ 346.486545] Bluetooth: hci5: command tx timeout [ 346.547950] Bluetooth: hci6: command tx timeout [ 346.611691] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:05:17 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8169a6fb RDX=ffff888034688000 RSI=ffffffff8169a62b RDI=0000000000000005 RBP=ffff88802ffafc58 RSP=ffff88802ffafad0 R8 =0000000000000001 R9 =fffff9400036756e R10=0000000000000001 R11=00000000000c3270 R12=ffffea0001b3ab80 R13=000000000000000f R14=ffff8880091782c0 R15=dffffc0000000000 RIP=ffffffff81517c28 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f751a84f820 CR3=0000000027548000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000180 RCX=ffffffff812ef5ee RDX=fffffbfff0fda9db RSI=0000000000000008 RDI=ffffffff87ed4ed0 RBP=ffff88802829d280 RSP=ffff888030f475e0 R8 =0000000000000000 R9 =fffffbfff0fda9da R10=ffffffff87ed4ed7 R11=00000000000c2f81 R12=ffff88802829dce8 R13=0000000000000000 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812ef5f6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f48149f4c8 CR3=000000002a666000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000